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CLAIMS 

1. A method for performing authentication in a communication system 
comprising an authentication server (AS), and a user profile store storing user 
profiles for users of the communication system, the method comprising: 

transmitting from the authentication server to the user profile store a 
request for the user profile of a user; 

receiving at the AS a response to the request; 

determining whether the response is indicative of an error; and 

if the response is indicative of an error, transmitting from the 
authentication server to the user profile store a message of a type such as to 
trigger the user profile store to perform a location update procedure in respect 
of the user. 

2. A method as claimed in claim 1 , wherein the message is of a type such as 
to trigger the user profile store to perform the location update and 
subsequently transmit the user profile of the user to the authentication server. 

3. A method as claimed in claim 1, wherein the user profile store is a user 
profile store of a GSM network. 

4. A method as claimed in claim 1, wherein the user profile store is a home 
location register (HLR). 

5. A method as claimed in claim 1, wherein the user profile store is such as 
to: 

in some circumstances return to the authentication server the user 
profile of the user in response to the said request; and 

in other circumstances return to the authentication server an error 
message in response to the said request. 
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6. A method as claimed in claim 5, wherein the said other circumstances 
include the user not having been in communication with the network of which 
the user profile store is a part for a prolonged period. 

7. A method as claimed in claim 1, wherein the said request is a message 
according to the MAP protocol. 

8. A method as claimed in claim 7, wherein the said request is a 
M A P_R E STO R E_D ATA message. 

9. A method as claimed in claim 1 , wherein the message of a type such as to 
trigger the user profile store to perform a location update procedure in respect 
of the user is a message according to the MAP protocol. 

10. A method as claimed in claim 9, wherein the said the message of a type 
such as to trigger the user profile store to perform a location update procedure 
in respect of the user is a MAP_UPDATE_LOCATION or a 
MAP_UPDATE_GPRS_LOCATION message. 

1 1 . A method as claimed in claim 1 , further comprising: 

receiving at the authentication server the user profile of the user from 
the user profile store; and 

authenticating credentials of the user by means of the received user 
profile; and wherein 

if the credentials are correctly authenticated the user is granted access 
to a resource, and otherwise the user is denied access to the resource. 

12. A method as claimed in claim 11, wherein the resource includes access 
to a network other than the one of which the user profile store is a part. 

13. A method as claimed in claim 12, wherein the network other than the one 
of which the user profile store is a part is a wireless local area network. 
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14. An authentication server (AS) for performing authentication in a 
communication system comprising a user profile store storing user profiles for 
users of the communication system, the authentication server being arranged 
to, in order to perform authentication: 

transmit from the authentication server to the user profile store a 
request for the user profile of a user; 

receive at the AS a response to the request; 

determine whether the response is indicative of an error; and 

if the response is indicative of an error, transmit from the authentication 
server to the user profile store a message of a type such as to trigger the user 
profile store to perform a location update procedure in respect of the user. 

15. A communication system comprising: 

a user profile store storing user profiles for users of the communication 
system; and 

an authentication server (AS) for performing authentication in the 
communication system and being arranged to, in order to perform 
authentication: 

transmit from the authentication server to the user profile store a 
request for the user profile of a user; 

receive at the AS a response to the request; 

determine whether the response is indicative of an error; and 
if the response is indicative of an error, transmit from the authentication server 
to the user profile store a message of a type such as to trigger the user profile 
store to perform a location update procedure in respect of the user. 



